I’m running for the OpenID board of directors

Q. Cool! Can I vote for you?

Anyone who is a member of the Foundation is eligible to vote. Membership in the foundation costs $25, and requires an OpenID (Yahoo or Google will work fine if you have an account at one of those sites).

If you’re interested in OpenID and the future of the web, please join! And then vote for me. Thanks!

Q. Huh? What is OpenID?

If you aren’t familiar with OpenID, don’t worry- you’re not alone. It’s a geeky protocol that says how to use an account from one website to log into another website. It was designed initially as a way to avoid typing a username and password into every site around the web. You should watch the same video I did that convinced me of its potential.

Q. I don’t get it.

You can try it out by visiting a Blogger blog, like my brother Scott’s. You can leave a comment using your Google account, or any OpenID. Providers currently include Yahoo, AOL, Livejournal, and a few others. Here’s a screenshot:

Logging into Blogger using my yahoo.com OpenID

As you can see, the user experience leaves a little to be desired, as it’s not really obvious how it all works to a non-geek.

Q. What is Facebook Connect?

I’ve been working on this project for several months. It basically lets you log into a website using your Facebook account instead of making a new username and password. You also get tons of cool benefits like seeing what stuff your friends are doing, and publishing activities back to Facebook automatically (but only if you want to). Give it a shot at Citysearch or Techcrunch. Or on the Comment form on my blog (if you’re reading this on Facebook, click “view original post” and then check out the comment form).

Well, they aren’t competitors so much as just working at the same problem from different angles. You could say it’s complicated.

OpenID is a protocol, like HTTP, SSL, 802.11b. Facebook Connect is a product offered by a single company. But as far as products go, I think we did a pretty good job of it, and I’ve learned a lot that can be shared with the community.

Ultimately, I would love to see a world in which your information and identity follows you around. If you interact with a website, or a store, or a phone, then it knows who you are – to the extent that you want it to. All your data should be privacy protected, so that the user is ultimately in control of who gets to see what. But we can remove a lot of the friction that gets in the way of people sharing their data with who they want to share it with. I don’t think that Facebook can get to this world all by itself – that’s why they built the platform, and now Connect. I hope that by joining the board I can establish a tighter connection and increase communication between competitors and allies alike.

Q. Watch out for this shoe!

Q. What do you think OpenID needs to do to improve adoption?

The message of OpenID has generally been “make it easier for consumers to log into multiple sites without a new password”. Well, after a few years, it’s pretty clear that that is not enough to get people to adopt it.

The primary competitor to OpenID is not Facebook Connect, Google Friend Connect, or any of these new systems. It’s old-fashioned email. When a site gets your email address, they get both an identifier and a way to contact you. When they get an OpenID, all they get is an identifier. As long as an OpenID is less valuable than an email address, it will not be adopted widely. So we need to make it more valuable to websites.

There are elements of the “open stack” that can layer on top of OpenID and provide not only a way to contact the user, but also get their profile info, friend data, and distribution among their friends. These are all available via Facebook Connect, and they offer real value. For instance, with Connect, websites are impressed by how much data they get from their users, and how much more content users contribute. For example, Govit reported that more than half of their new users use Connect, and they all have names and profile pictures, and they can publish their stories back into their Facebook Newsfeed.

Unfortunately, OpenID providers aren’t there yet with providing all that value. There are extensions to OpenID that help with this: simple registration, attribute exchange, OAuth, portable contacts, …. Sorry, did I lose you? These different pieces are really confusing and inconsistently applied. As long as that is true, it will be really difficult for relying parties to well, rely on them being there. Yahoo is the only major OpenID provider that offers simple reg (I mean of the big few) and even they haven’t released it publicly (although soon will). I hope during 2009 that the breadth of providers offering the full “open stack” will be dramatically expanded, such that relying parties can come to expect a consistent experience from the average OpenID provider. It should be as consistent as it is with Facebook Connect.

Q. What would you do as a board member?

My understanding is that the board is actually somewhat disjoint from the mechanics of actually moving the technology forward. The board members meet once or twice a quarter, plan and manage finances, and set the strategic direction and overall goals of the OpenID brand and organization. I think I can help particularly in representing the needs of big companies (Facebook specifically), and the top 100 websites, and making sure that their voice is heard within the OpenID board meetings. I’m also really interested in learning about the goings-on in the technology, and talking with representatives from other stakeholders in OpenID.

Regardless of whether I make the board, I plan to work within the community … help with the OAuth extension, continue to evangelize OpenID and other elements of the open stack within Facebook. I’ve done a significant amount of work towards that end already and plan to continue.

This entry was posted on Wednesday, December 17th, 2008 at 1:00 pmand is filed under OpenID, Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.

Good luck!
I think one of the big concerns bloggers and others who run community websites have about login systems like OpenID is that big companies like Yahoo and Facebook keep hold of user email addresses. If the publisher (e.g. you on this blog) wants to get in touch with their readers/users/community, they need to go via these middlemen. For example, Facebook Connect provides you with a fingerprint/hash of my email address. If I had left this comment directly in the comment field of wordpress (I thin you’re using Wordpress, no?), you could have my email.